Analysis
- max time kernel
149s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
05/07/2026, 06:32
General
- Target aviationacademy.co.in.exe
- Size 47KB
- Sample260705-hal8vaaw9s
- SHA256 82afad84e5f5f8e31805199d48bfecd7021e8e2c5eea74c18b1095e69fce7516
Malware Config
Extracted
-
asyncrat
-
1.0.7
-
Default
-
aviationacademy.co.in/vi-vn/:443
-
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
- Family: AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\aviationacademy.co.in.exe"C:\Users\Admin\AppData\Local\Temp\aviationacademy.co.in.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2564-0-0x0000000000FB0000-0x0000000000FC2000-memory.dmp
memory/2564-1-0x00007FFA1C7CF000-0x00007FFA1C7D0000-memory.dmp
memory/2564-2-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-3-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-4-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-5-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-6-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-7-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-8-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-9-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp
memory/2564-10-0x00007FFA1C640000-0x00007FFA1CFE4000-memory.dmp